CVE-2023-5240

2023-10-1312:22:23

DEVOLUTIONS

www.cve.org

improper access control

pam propagation scripts

devolutions server

retrieval of passwords

get request

0.001 Low

EPSS

Percentile

37.2%

JSON

Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with permission to manage PAM propagation scripts to retrieve passwords stored in it via a GET request.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "PAM"
    ],
    "product": "Server",
    "vendor": "Devolutions",
    "versions": [
      {
        "lessThanOrEqual": "2023.2.8.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

devolutions.net/security/advisories/DEVO-2023-0017

0.001 Low

EPSS

Percentile

37.2%

JSON

Related for CVELIST:CVE-2023-5240